RiftAurora[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RiftAurora.dll
Size

89KB
MD5

a3653673a9ebf2a9744ff37c86a2a706
SHA1

e5bb6a43bdca1823d79c563dbba83faee35251ce
SHA256

07fc760ba3990bad31e4b35a77b5606d6d0f2c53bed960718808d921743e0dd6
SHA512

b3d2d7e7862fc22e40f380e99ce0ad84f83d164ab253b52a263788aea26eb589ba7596cab349c5da1f85f014a7b21a8ec5cd1cabcce28a031eee95c7d8c70e0e
SSDEEP

1536:IHV1q19UeyYBeEOI/iCLw0IoDYJt+vTM9mpiGwBIDWdq:IHV1+9UPYsI/i6wjoto9mpiG09q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RiftAurora.dll

Files

RiftAurora.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Jdsna\OneDrive\Documents\A Banana Menu\testplate\obj\Debug\netstandard2.1\StupidTemplate.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ